Side by side
CORE Search vs DFIR-IRIS
Both stand on case management software. Which one you can start free with, which one lets you read the code, and what each costs once you pay.
Free plan AndroidiPhoneWeb
CORE Search combines case mapping, chronology, canvassing, and multi-agency updates for incident investigations. The free account cannot create incidents or edit data, so teams needing those capabilities require a Badge Apps Premium Account.
Visit CORE Search
Free plan Open source APILinuxMac+3
DFIR-IRIS brings case records, evidence controls, collaboration and reporting into a self-hosted incident response platform. Its beta release status and restricted-environment guidance are important deployment considerations.
Visit DFIR-IRISThe facts
| CORE Search | DFIR-IRIS | |
|---|---|---|
| Free plan | Yes | Yes |
| Open source | Not published | Yes |
| Runs on | Android, iPhone, Web | API, Linux, Mac, Self-hosted, Web, Windows |
| Lowest paid plan | Free or on request | Free or on request |
| Plans published | 1 | 2 |
| Maker | Not published | DFIR-IRIS |
| Website | search.coreincident.com | dfir-iris.org |
| On case management software | #5 of 177 | #1 of 177 |
CORE Search: what it does well
- Maps people, locations, vehicles, and their connections
- Builds a time-stamped case chronology
- Links identities, contact details, and intelligence
- Supports real-time multi-agency updates
- Lists workflow automation and reporting dashboards
What to know first
- Case intake forms are not available
- Creating incidents and editing data require Premium
- Free access is read-only, plus Chat
DFIR-IRIS: what it does well
- Free and open-source with self-hosted deployment.
- Cases include an audit trail.
- Evidence verification supports three hash algorithms.
- Reports can be generated as PDF or DOCX.
What to know first
- Current v3 release is beta and not production-ready.
- Windows may need Dockerfile changes for file storage.
- Project advises against Internet exposure.
- Linux and macOS are the officially supported systems.
Alternatives to CORE Search Alternatives to DFIR-IRIS The whole list